Privacy
Version 2026-06-privacy-v1 · last updated June 11, 2026
CardPicker plans credit card applications. To do that we need a little financial information about you. Here's exactly what we collect, what we do with it, and how to make us forget all of it. Plain language, because that's the point.
What we collect
Your email address; your onboarding answers (province, income range, credit score range, monthly spend, spending categories, goals, how fast you churn, whether you have a business or a partner who churns); and the cards you tell us you've held, with approximate dates and whether you got the bonus. We collect ranges, not exact numbers. We never connect to your bank, never run a credit check, and never see your statements.
What we use it for
One thing: generating and maintaining your application plan and its reminders. We don't build advertising profiles and we don't use your data to train anything.
Who we share it with
Nobody, except the service providers that run the product: our database host and our email provider (to deliver sign-in links and reminders). They process data on our instructions. We never sell or rent your information.
Where it lives
Your data is stored in our production database and is encrypted in transit. Calendar feed URLs contain a private token — treat them like a password; you can reset the token in Settings any time.
Deleting your data
Settings → Delete account removes everything immediately and permanently: profile, card history, plans, reminders, and consent records. It's a hard delete, not a deactivation. No grace period, no backups kept on purpose.
Consent
We record the date and policy version you consented to when you complete onboarding, as required by Quebec's Law 25 and PIPEDA. If this policy materially changes, we'll ask again.
Questions
Email us and a human will answer. If you're in Quebec, you can also contact the Commission d'accès à l'information; elsewhere in Canada, the Office of the Privacy Commissioner.